blackbricksoftware/civicrm-container-logs

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. That is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 of 3 action references are unpinned, leaving a workflow supply-chain hygiene gap.